Independence Day Deal! Unlock 25% OFF Today – Limited-Time Offer - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

GIAC Exam GASF Topic 8 Question 41 Discussion

Actual exam question for GIAC's GASF exam
Question #: 41
Topic #: 8
[All GASF Questions]

Where would an examiner find evidence of an iOS update to device from one version to another?

Show Suggested Answer Hide Answer
Suggested Answer: B

Contribute your Thoughts:

Myra
2 months ago
Personally, I think the examiner should just update the test to the latest version. That way, we'd all be on the same page, you know?
upvoted 0 times
Tamekia
15 days ago
C) Data partition
upvoted 0 times
...
Sue
16 days ago
B) System partition
upvoted 0 times
...
Shaun
17 days ago
A) NOR memory
upvoted 0 times
...
...
Tu
2 months ago
NOR memory, huh? That's an interesting choice. I wonder if the examiner is trying to trick us with that one.
upvoted 0 times
...
Portia
2 months ago
The SIM card? Really? I don't think iOS updates have anything to do with the SIM card. That's just silly.
upvoted 0 times
...
Isadora
2 months ago
Hmm, the data partition? I'm not so sure about that one. Wouldn't the update files be in the system partition instead?
upvoted 0 times
...
Daniel
2 months ago
I'd look for the evidence in the system partition. That's where the OS updates are typically stored, right?
upvoted 0 times
Peter
1 months ago
I think it would be best to check the system partition for evidence of the iOS update.
upvoted 0 times
...
Kristine
1 months ago
Yes, you're correct. System partition is where the OS updates are usually stored.
upvoted 0 times
...
...
Graciela
2 months ago
Actually, I believe the evidence of an iOS update can be found in the data partition, not the system partition.
upvoted 0 times
...
Anika
2 months ago
I agree with Deane, the system partition is where the iOS update would be stored.
upvoted 0 times
...
Deane
3 months ago
I think the evidence of an iOS update would be found in the system partition.
upvoted 0 times
...

Save Cancel